← Back to Home

Data Rights

Last Updated: May 5, 2026

1. What You Can Ask For

Your data is yours. The records you keep in MyPetVault belong to you and your household, and you should always be able to see them, change them, take them with you, or delete them. At any time, you can request:

• Access and export. A complete export of your account data — including your profile, pets, health records (visits, medications, vaccinations, weights, allergies), document metadata, and subscription state — delivered in JSON. Email support@mypetvault.org from the address on your account and we will deliver the export to that email address within 30 days.
• Correction. Updates to any information you believe is inaccurate or out of date. You can correct most fields yourself inside the app; for anything you cannot edit, contact support and we will help.
• Deletion. Removal of your account and all records associated with it. See Section 3 for how this works in practice.
• Restriction of processing. A request that we stop processing your data for specific purposes while a question or dispute is resolved.
• A list of third-party sharing. A summary of any third parties your data has been shared with. For MyPetVault, this list is short and is spelled out in our Privacy Policy.
• Opt out of future sale, sharing, or commercial use. We do not currently sell or share your personal information or use your uploaded content to train AI or machine-learning models. If those practices change, you may opt out before they begin, and you may also ask to be excluded from aggregated statistics as a courtesy at any time. See Section 8 for the available opt-out methods, including Global Privacy Control.

No discrimination for exercising rights. We do not discriminate against you for exercising any of the rights described on this page. You will not receive different prices or services, or a different quality of service, because you made a request.

2. How to Make a Request

To submit any of the requests above:

1. Send an email to support@mypetvault.org from the email address on your MyPetVault account.
2. Tell us the specific request type (for example, “export my data” or “delete my account”).
3. If the request concerns a specific pet or record, include enough detail for us to find it.

We will acknowledge any data-rights request within 48 hours and will substantively respond within 30 days for GDPR/UK GDPR requests (extendable by up to 60 additional days where the request is complex, with notice and reasons), within 45 days for CCPA requests (extendable once by 45 days with notice), and as soon as practicable for everyone else. Send your request to support@mypetvault.org from the email address on your account so we can verify your identity.

To protect your records, we may need to verify your identity before acting on a request. Usually this means confirming control of the email address on your account. We will never ask for your password.

Verification of requests. We may need to verify your identity before responding to a request. We will use the email address on your account, and we may ask you to confirm specific account details to confirm you are the account holder. If we cannot verify your identity, we may not be able to honor the request.

Authorized agents. California residents may use an authorized agent to submit a request on their behalf. We may require the agent to provide written permission from you and may require you to verify your own identity directly with us.

3. How Deletion Works

You can delete your account and all associated data directly from the app:

1. Open the You tab and tap the gear icon to open Settings.
2. Scroll to Delete Account.
3. Type your email to confirm, then tap Delete account permanently.

Deletion is immediate and irreversible. Your user record, every pet on the account, every health record (visits, medications, vaccinations, weights, allergies), every uploaded document, and the underlying files in storage are removed from our active database in a single operation. We retain no copy that points back to you.

• Backups. Encrypted snapshots of the database may be retained for up to 30 days strictly for disaster-recovery purposes. We do not access these backups except in the event of a recovery; if a recovery occurs, we re-apply your deletion as soon as practicable.
• Subscriptions. Deleting your account does not cancel an active Apple App Store or Google Play subscription. You must cancel those separately under iOS Settings → Apple ID → Subscriptions or Google Play → Subscriptions. The app surfaces this clearly on the deletion confirmation screen for subscribed users.
• If you cannot access the app. Email support@mypetvault.org from the address on your account and we will complete the deletion within 30 days.
• Individual records. When you delete a single record in the app — a visit, medication, vaccination, weight, or allergy — we remove it from view immediately. The underlying database row is kept until the account it belongs to is deleted, or until you ask us to purge it on request.
• Inactivity. MyPetVault does not automatically delete accounts for inactivity. If you stop using the app and do nothing, your records stay where they are.

4. Don’t Want Us Reading Your Documents?

When you upload a vet paper to MyPetVault, the document is sent to Google’s Gemini Flash service so it can read what’s on the paper and pull out the records. If you’d rather not have a document processed by a third party, you have a simple opt-out: don’t upload documents.

If you choose not to upload documents to MyPetVault, our document-extraction systems do not process them. You can use the manual entry features for any record type — visits, medications, vaccinations, weights, and allergies — to keep document content entirely off the platform. See our Security page for the full picture.

5. Children’s Data

MyPetVault is a service for adults keeping track of their pets’ health. It is not directed to children, and we do not knowingly collect personal information from children below the applicable age of digital consent — 13 in the United States (COPPA); 16 in the European Union (GDPR Art. 8), though we do not currently offer the Service to EU residents. If you are a parent or guardian and believe your child has provided us with personal information, please contact support@mypetvault.org and we will delete the information promptly.

If you believe we have inadvertently collected information from a child under the applicable minimum age, please contact us at support@mypetvault.org and we will take prompt steps to delete the relevant information.

6. Region-Specific Rights

6.1 European Union, United Kingdom, and Switzerland (GDPR / UK GDPR / FADP)

We do not currently offer the Services to residents of the European Economic Area, the United Kingdom, or Switzerland — see Terms Section 2. This section is informational. If you reside in the EEA/UK/CH and our geo-restriction failed (for example, you used a VPN or our country detection misidentified you), contact us and we will make commercially reasonable efforts to honor the rights described here.

Under the GDPR and UK GDPR you have the rights described above plus:

• The right to object to certain kinds of processing, including any processing based on our legitimate interests.
• The right to withdraw consent, where we rely on consent, without affecting the lawfulness of prior processing.
• The right to data portability — to receive your data in a structured, commonly used, machine-readable format.
• The right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. MyPetVault does not make decisions of that kind about you.
• The right to lodge a complaint with your local data protection supervisory authority if you believe we have mishandled your information. A directory of EU/EEA supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en.

6.2 California (CCPA / CPRA)

Iterrum LLC is itself a California business and is subject to the CCPA/CPRA as a "business" under Cal. Civ. Code §1798.140(d). We do not currently sell or share your personal information as defined under the CCPA/CPRA. If this practice changes in the future, California residents will be notified in advance and given the right to opt out before any sale or sharing begins.

If you are a California resident, you have the rights described in Section 1 plus, under the CCPA and CPRA:

• The right to know what personal information we collect, how we use it, and who we share or sell it to. The answer is in our Privacy Policy.
• The right to delete personal information we have collected from you, subject to the narrow exceptions allowed by the CCPA.
• The right to correct inaccurate personal information we hold about you.
• The right to opt out of the sale or sharing of your personal information for cross-context behavioral advertising and other commercial purposes.
• The right to limit the use and disclosure of sensitive personal information to what is necessary to perform the Services.
• The right not to be discriminated against for exercising any of these rights. We will not deny service, charge different prices, or provide a lower quality of service because you exercised a right under the CCPA.

California "Do Not Sell or Share My Personal Information"

To exercise the right to opt out of "sale" or "sharing" under the CCPA/CPRA, use any of the following methods. We will treat each as a valid opt-out request and confirm receipt promptly.

• Visit the Cookie Settings page and turn analytics off.
• Send an email to support@mypetvault.org from the address on your account with the subject line "Do Not Sell or Share My Personal Information".
• Configure your browser to send the Global Privacy Control (GPC) signal. We treat GPC as a valid opt-out signal under California regulations, and the signal extends to all sales and shares from that browser without further action.

California "Shine the Light" Disclosure

California Civil Code §1798.83 — California residents may request, once per calendar year and free of charge, a list of the categories of personal information disclosed to third parties for those third parties' direct marketing purposes in the preceding calendar year, together with the names and addresses of those third parties. To request this list, email support@mypetvault.org with the subject line "Shine the Light request".

6.3 Other US States with Comprehensive Privacy Laws

If you reside in Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Oregon (OCPA), Utah (UCPA), Montana (MCDPA), or another US state with a comprehensive consumer privacy law, you have rights similar to those described in Section 6.2 — including the right to know, right to delete, right to correct, and right to opt out of profiling and certain processing. Send any such request to support@mypetvault.org from the address on your account. Other state privacy laws may apply depending on your residency. We will honor any rights granted to you by applicable law where we are required to do so. The list above is illustrative and not exhaustive.

7. Contact

For any data-rights request, question, or concern, please contact us at:

Iterrum LLC
Email: support@mypetvault.org
Website: mypetvault.org

Mailing address: TODO: add Iterrum LLC mailing address before publishing legal pages.

We do not currently have an establishment, employee, or representative inside the European Economic Area, the United Kingdom, or Switzerland; an Article 27 representative will be appointed before we offer the Services in those regions.

We are a small team and we read every message.

8. Opt Out of Data Sharing and Sale

We do not currently sell or share your personal information, and we do not currently use your uploaded content to train AI or machine-learning models. We may build advertising audiences and measure advertising performance as described in Section 15 of our Privacy Policy. The mechanisms below let you opt out of these uses today, and pre-record an opt-out for any future practice changes, to the extent applicable law gives you that right (and as a courtesy where it does not).

• Opt out of sale/share of personal information — visit Cookie Settings or email support@mypetvault.org with the subject "Do Not Sell or Share My Personal Information". The Global Privacy Control (GPC) browser signal is treated as a valid opt-out request.
• Opt out of aggregated statistics — Aggregated and anonymized data is not legally your personal information under applicable law, so this opt-out is offered as a courtesy rather than a legal obligation. If you would prefer your records not be included in any aggregate statistics, email support@mypetvault.org with the subject "Aggregation opt-out" and we will honor your request going forward.
• AI training — We do not currently use your uploaded content or records to train AI or machine-learning models. If this changes, you will be notified in advance and given the opportunity to opt out before the practice begins.
• Opt out of advertising tracking on Apple devices — when the MyPetVault app first asks for App Tracking Transparency permission, choose "Ask App Not to Track". You can change this choice at any time in iOS Settings → Privacy & Security → Tracking.
• Opt out of advertising personalization on Android devices — reset your Advertising ID or opt out of personalized advertising in your device's Google settings.

We will process opt-out requests as soon as practicable, generally within 30 days. We cannot retroactively recall data that has already been transferred to a third-party recipient or that is part of a previously aggregated dataset, because that data is no longer in our control or no longer identifies you, respectively.